Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/QlxhBKroOTEoHgBPrV2fdiMsCXg.mft
File:                     QlxhBKroOTEoHgBPrV2fdiMsCXg.mft (raw, json)
Hash identifier:          88LzVovkBPsVM5Mg98/EhDV/2Jq+nLnVHjdoUWbf3UE=
Subject key identifier:   FB:3C:DF:D4:81:45:A3:5F:47:9D:84:01:CD:43:EC:DD:50:A4:91:70
Authority key identifier: 42:5C:61:04:AA:E8:39:31:28:1E:00:4F:AD:5D:9F:76:23:2C:09:78
Certificate issuer:       /CN=425c6104aae83931281e004fad5d9f76232c0978
Certificate serial:       0185613D748C13A25B494A2F77C0731ED308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlxhBKroOTEoHgBPrV2fdiMsCXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/QlxhBKroOTEoHgBPrV2fdiMsCXg.mft
Manifest number:          0271
Signing time:             Fri 30 Dec 2022 04:14:55 +0000
Manifest this update:     Fri 30 Dec 2022 04:14:55 +0000
Manifest next update:     Sat 31 Dec 2022 04:14:55 +0000
Files and hashes:         1: 3bzUmTYkyxfdTIIBrdZAOl3--78.roa (hash: MepSCzodqgR9u3ZgPp/OCdL5XQ2faQIYHb8BJba/jkE=)
                          2: QlxhBKroOTEoHgBPrV2fdiMsCXg.crl (hash: C00hHsl67V/ilvIpMH22F+qgdKDxq+yYkMCLAQXUJuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:61:3d:74:8c:13:a2:5b:49:4a:2f:77:c0:73:1e:d3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425c6104aae83931281e004fad5d9f76232c0978
        Validity
            Not Before: Dec 30 04:14:55 2022 GMT
            Not After : Dec 31 04:14:55 2022 GMT
        Subject: CN=fb3cdfd48145a35f479d8401cd43ecdd50a49170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f7:d6:14:06:98:79:80:cd:58:ef:9a:c9:d6:
                    50:c5:d2:b2:f6:ff:5d:46:52:84:60:fe:32:03:72:
                    be:34:90:5e:28:8b:b5:a1:24:11:f1:70:3c:0e:76:
                    6a:70:b6:9d:28:f6:f6:df:0e:47:b3:75:47:03:06:
                    c4:c3:cc:17:ed:a4:90:29:1a:76:c0:51:f3:76:c5:
                    1d:0f:d5:74:9e:14:4b:68:c9:f5:84:a9:d7:07:e8:
                    e0:38:08:63:a2:b5:a9:ca:b1:a2:75:2f:2c:8c:2d:
                    ed:42:ec:27:2b:87:ab:36:da:7a:06:c1:5c:32:52:
                    a9:23:80:ab:32:2a:ab:ed:71:74:25:1c:e4:a6:9a:
                    e6:e8:d7:e9:03:02:97:93:b8:d4:3b:7e:fc:bb:06:
                    cc:e7:2c:dd:c6:bd:d4:59:71:af:cd:e4:05:14:c1:
                    2f:db:0e:6d:b4:19:d5:63:80:04:8b:cb:6a:11:8e:
                    22:c8:2e:c0:70:17:79:b3:46:60:69:0a:48:08:d8:
                    d9:56:c7:43:a0:cb:b6:83:21:8e:47:4b:47:a0:55:
                    e4:da:e2:c2:7f:ce:ce:fa:15:dc:7e:8f:cd:e5:ea:
                    1c:d3:79:77:ad:83:53:7e:b6:5c:78:02:30:3e:4a:
                    2b:a3:04:4f:c4:6a:a0:7a:93:a2:1e:6c:8d:bb:40:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3C:DF:D4:81:45:A3:5F:47:9D:84:01:CD:43:EC:DD:50:A4:91:70
            X509v3 Authority Key Identifier:
                keyid:42:5C:61:04:AA:E8:39:31:28:1E:00:4F:AD:5D:9F:76:23:2C:09:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlxhBKroOTEoHgBPrV2fdiMsCXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/QlxhBKroOTEoHgBPrV2fdiMsCXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba681-3649-420f-8f24-67cdb2f0693d/1/QlxhBKroOTEoHgBPrV2fdiMsCXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2c:49:13:8b:c3:43:76:89:ea:d4:27:ed:c4:4c:d5:6a:12:
         06:27:f8:05:ae:93:81:fd:18:40:fa:8f:5b:2d:42:53:e6:a0:
         09:2b:d7:79:30:23:96:aa:9f:de:81:d2:4a:52:5a:f4:9b:7e:
         fa:45:a5:8c:91:a4:a2:1d:7f:57:f3:3c:ed:4f:51:2f:9d:47:
         dd:e8:c3:1f:31:11:f0:6a:98:be:bb:c1:55:37:ab:38:24:5c:
         2c:d0:5d:13:2b:85:24:ff:22:e2:f2:01:d4:6d:a5:a4:5d:c8:
         1a:c0:f6:f7:15:d4:29:37:13:b4:a3:d1:0a:93:1c:3e:72:2e:
         6b:b0:57:0e:e7:c5:b5:6f:47:42:3d:b0:fd:93:c3:7e:37:da:
         36:f4:e1:f9:37:2a:b5:4a:78:a5:98:8a:dd:53:31:a8:83:29:
         20:0a:60:57:81:15:e3:ac:07:98:f9:40:51:92:b1:20:93:c2:
         a9:c3:de:3b:d0:34:e7:bf:ac:c9:c8:e5:1c:6d:12:85:40:e9:
         49:4a:56:d7:b0:55:fc:9f:c5:f2:54:d2:cb:00:86:1b:64:eb:
         98:da:e6:1b:dd:79:40:df:74:f0:bc:2d:fe:5a:26:08:a0:44:
         38:a6:61:01:06:ce:5e:02:39:d1:c3:34:28:12:87:a5:8a:7f:
         97:e7:82:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVhPXSME6JbSUovd8BzHtMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWM2MTA0YWFlODM5MzEyODFlMDA0ZmFkNWQ5Zjc2MjMy
YzA5NzgwHhcNMjIxMjMwMDQxNDU1WhcNMjIxMjMxMDQxNDU1WjAzMTEwLwYDVQQD
EyhmYjNjZGZkNDgxNDVhMzVmNDc5ZDg0MDFjZDQzZWNkZDUwYTQ5MTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPfWFAaYeYDNWO+aydZQxdKy9v9d
RlKEYP4yA3K+NJBeKIu1oSQR8XA8DnZqcLadKPb23w5Hs3VHAwbEw8wX7aSQKRp2
wFHzdsUdD9V0nhRLaMn1hKnXB+jgOAhjorWpyrGidS8sjC3tQuwnK4erNtp6BsFc
MlKpI4CrMiqr7XF0JRzkpprm6NfpAwKXk7jUO378uwbM5yzdxr3UWXGvzeQFFMEv
2w5ttBnVY4AEi8tqEY4iyC7AcBd5s0ZgaQpICNjZVsdDoMu2gyGOR0tHoFXk2uLC
f87O+hXcfo/N5eoc03l3rYNTfrZceAIwPkorowRPxGqgepOiHmyNu0BDzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPs839SBRaNfR52EAc1D7N1QpJFwMB8GA1UdIwQY
MBaAFEJcYQSq6DkxKB4AT61dn3YjLAl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWx4aEJLcm9PVEVvSGdCUHJWMmZkaU1zQ1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85YmE2ODEtMzY0OS00MjBmLThmMjQt
NjdjZGIyZjA2OTNkLzEvUWx4aEJLcm9PVEVvSGdCUHJWMmZkaU1zQ1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85YmE2ODEtMzY0OS00MjBmLThmMjQtNjdjZGIyZjA2OTNk
LzEvUWx4aEJLcm9PVEVvSGdCUHJWMmZkaU1zQ1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSxJE4vD
Q3aJ6tQn7cRM1WoSBif4Ba6Tgf0YQPqPWy1CU+agCSvXeTAjlqqf3oHSSlJa9Jt+
+kWljJGkoh1/V/M87U9RL51H3ejDHzER8GqYvrvBVTerOCRcLNBdEyuFJP8i4vIB
1G2lpF3IGsD29xXUKTcTtKPRCpMcPnIua7BXDufFtW9HQj2w/ZPDfjfaNvTh+Tcq
tUp4pZiK3VMxqIMpIApgV4EV46wHmPlAUZKxIJPCqcPeO9A057+sycjlHG0ShUDp
SUpW17BV/J/F8lTSywCGG2TrmNrmG915QN908Lwt/lomCKBEOKZhAQbOXgI50cM0
KBKHpYp/l+eCQg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-fra.rpki-client.org